ID:               3027
 Updated by:       [EMAIL PROTECTED]
 Reported By:      [EMAIL PROTECTED]
-Status:           Open
+Status:           Closed
 Bug Type:         Reproducible Crash
 Operating System: Linux, FreeBSD
 PHP Version:      3.0.12
 New Comment:

can't reproduce in 4.2.3 apache module, 
and both 4.2.3 and 3.0.18 cgi binaries produce identical (correct)
output


Previous Comments:
------------------------------------------------------------------------

[1999-12-22 14:49:30] [EMAIL PROTECTED]

error_log("'%eagle'");

produces in the apache error_log:
[Wed Dec 22 11:28:26 1999] [error] '5.318473e-315agle'

other printf strings.  In a sql statement of length it crashes
repeatedly on any query that has a %e %f %g %h %n

My guess is error_log is taking from the next set of arguments, the
values for %.  Thus it is causing a buffer overflow from time to time.
though error_log("'%etttt'");  shows the same scientific number as
eagle.

I have tested this under Redhat 6.0, Apache/1.3.9, PHP 3.0.12.  FreeBSd
with Apache/1.3.3, PHP 3.0.6, and Redhat 5.1, Red Hat Secure/2.0, 
PHP3.0.8.

a '%%' prints % just fine.


I have added a note to the error_log page. 

------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=3027&edit=1

Reply via email to